Skip to content

Add all four Lookout API toolkit projects with docs and security hardening#1

Open
fgravato wants to merge 1 commit intolookout:mainfrom
fgravato:main
Open

Add all four Lookout API toolkit projects with docs and security hardening#1
fgravato wants to merge 1 commit intolookout:mainfrom
fgravato:main

Conversation

@fgravato
Copy link
Copy Markdown
Collaborator

@fgravato fgravato commented Apr 30, 2026

Summary

  • Lookout Device Dashboard (Lookout_Device_dashboard-release-v1.0/) — Flask web app for real-time device fleet management with multi-tenant support, CVE scanning, Excel export, and two-layer caching
  • Lookout Application Tool (Lookout-Application-Tool/) — Flask web UI for submitting mobile apps (IPA/APK/AAB + store URLs) to Lookout for security analysis
  • MRAv2 Syslog Connector (lookout-mrav2-syslog-connector-V2/) — High-performance SSE connector that streams Lookout events to QRadar/Splunk syslog in real time; scales to 50k+ devices across 10 tenants
  • Lookout Threat Feed Manager (Lookout-ThreatFeed-V4/) — Python CLI for managing Lookout threat feeds via REST API with interactive and non-interactive/scriptable modes

Security hardening

  • Rebuilt syslog connector .gitignore to exclude config.ini, config.state, .env, logs, and OS artifacts
  • Updated App Tool workflow to use config.example.pyconfig.py with config.py explicitly git-ignored

Documentation

  • New root README.md: master overview with quick-starts for all four tools, feature summaries, security notes, and contributing guide
  • Fixed Device Dashboard README: removed stale internal folder references, updated license section for public release
  • Fixed App Tool README: updated install path and setup instructions
  • Fixed Syslog Connector README: updated install path references
  • Fixed ThreatFeed README: removed internal author attribution

Test plan

  • Each tool installs cleanly from its requirements.txt in a fresh virtual environment
  • Sample/example credential files are present and real credential files are excluded by .gitignore
  • Device Dashboard launches and renders the sample data mode (USE_SAMPLE_DATA=true python app.py)
  • Application Tool launches and the submission form is accessible at http://localhost:5000
  • Syslog Connector install.sh completes without errors
  • Threat Feed Manager --list-feeds CLI flag exits with code 0 when a valid API key is provided

…ening

- Lookout_Device_dashboard-release-v1.0: Flask device fleet dashboard with
  multi-tenant support, CVE scanning, Excel export, and intelligent caching
- Lookout-Application-Tool: Flask web UI for submitting mobile apps to Lookout
  for security analysis (IPA/APK/AAB + store URL support)
- lookout-mrav2-syslog-connector-V2: High-performance SSE connector that
  streams Lookout events to QRadar/Splunk syslog in real time
- Lookout-ThreatFeed-V4: Python CLI for managing Lookout threat feeds via
  REST API with interactive and non-interactive modes

Security hardening:
- Rebuilt syslog connector .gitignore to exclude config.ini, config.state,
  .env, logs, and OS artifacts (config.ini holds the API key)
- Updated App Tool README to use config.example.py -> config.py workflow
  with explicit note that config.py is git-ignored

Documentation:
- New root README.md: master overview with quick-start for all four tools,
  feature summaries, security notes, and contributing guide
- Fixed Device Dashboard README: removed stale internal folder name
  references and updated license section for public release
- Fixed App Tool README: updated install path, setup instructions
- Fixed Syslog Connector README: updated install path references
- Fixed ThreatFeed README: removed internal author attribution
@fgravato fgravato requested a review from franksrp-lookout May 4, 2026 18:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant